summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* gnu: busybox: Update to 1.33.0.•••* gnu/packages/busybox.scm (busybox): Update to 1.33.0. Léo Le Bouter2021-03-191-2/+2
* gnu: busybox: Fix CVE-2021-28831.•••* gnu/packages/patches/busybox-CVE-2021-28831.patch: New patch. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/busybox.scm (busybox): Apply it. Léo Le Bouter2021-03-193-1/+60
* gnu: ruby-kramdown: Update to 2.3.1 [fixes CVE-2021-28834].•••* gnu/packages/ruby.scm (ruby-kramdown): Update to 2.3.1. Léo Le Bouter2021-03-191-2/+2
* gnu: ungoogled-chromium: Update to 89.0.4389.90-1.•••* gnu/packages/patches/ungoogled-chromium-system-opus.patch: New file. * gnu/local.mk (dist_patch_DATA): Adjust accordingly. * gnu/packages/chromium.scm (%preserved-third-party-files): Adjust for 89. (%chromium-version): Remove variable. (%ungoogled-revision): Set to 89.0.4389.90-1. (%ungoogled-origin): Conditionally set file name based on commit/tag. (%guix-patches): Add the new file. (libvpx/chromium): Update to 1.9.0-104-gb5d77a48d. (ungoogled-chromium)[version]: Use %UNGOOGLED-REVISION. [source]: Update hash. [arguments]: Adjust #:configure-flags for build system changes. Don't build with external WebRTC SSL library. Remove obsolete substitution. [inputs]: Remove OPENSSL. Change from PIPEWIRE to PIPEWIRE-0.3. Marius Bakke2021-03-193-37/+55
* news: Add ‘de’ translation.•••* etc/news.scm (channel-news): Add German translation. Florian Pelz2021-03-181-0/+15
* news: Add ‘nl’ translation.•••* etc/news.scm (channel-news): Add a Dutch translation. Tobias Geerinckx-Rice2021-03-181-2/+16
* news: Update erratum for '--keep-failed' vulnerability.•••* etc/news.scm: Change commit to behave in a (hopefully) more expected manner. Change http:// to https:// URL whilst here. Tobias Geerinckx-Rice2021-03-181-2/+2
* news: Add erratum for '--keep-failed' vulnerability.•••* etc/news.scm: Add entry. Tobias Geerinckx-Rice2021-03-181-0/+16
* doc: Document the guidelines for removing inactive committers.•••For more context, see the discussion in <https://bugs.gnu.org/47111>. * doc/contributing.texi (Commit Access): Add paragraph about removing inactive committers. Leo Famulari2021-03-181-0/+6
* gnu: emacsy-minimal: Fix build.•••* gnu/packages/guile-xyz.scm (emacsy-minimal)[native-inputs]: Add autoconf, automake, gettext-minimal, libtool, pkg-config, and texinfo. Tobias Geerinckx-Rice2021-03-181-1/+8
* tests: Make the STORE test more robust in a "pure" environment.•••Otherwise, the test crashes (not fails) when run in `guix environment --pure guix`. Fixes <https://bugs.gnu.org/46445>. * tests/store.scm (%shell): Fallback to "/bin/sh". Leo Famulari2021-03-181-1/+1
* gnu: Add countdown.•••* gnu/packages/time.scm (countdown): New variable. Also adds copyright, adds necessary module dependencies, and sorts them alphabetically. Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr> Ryan Prior via Guix-patches via2021-03-181-8/+40
* gnu: emacs-flymake-shellcheck: Update to 0.1-1.ac534e9•••* gnu/packages/emacs-xyz.scm (emacs-flymake-shellcheck): Update to 0.1-1.ac534e9 Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr> Morgan Smith2021-03-181-3/+3
* news: Fix ‘nl’ typo.•••* etc/news.scm (channel-news): This locale's ‘locale’'s ‘lokale’. Tobias Geerinckx-Rice2021-03-181-1/+1
* gnu: emacs-leaf: Update to 4.4.4.•••* gnu/packages/emacs-xyz.scm (emacs-leaf): Update to 4.4.4. Nicolas Goaziou2021-03-181-2/+2
* news: Add ‘nl’ translation.•••* etc/news.scm (channel-news): Add a Dutch translation. Tobias Geerinckx-Rice2021-03-181-2/+29
* gnu: dhewm3: Update to 1.5.1.•••* gnu/packages/game-development.scm (dhewm3): Update to 1.5.1. Tobias Geerinckx-Rice2021-03-181-2/+2
* gnu: elixir: Update to 1.11.4.•••* gnu/packages/elixir.scm (elixir): Update to 1.11.4. Tobias Geerinckx-Rice2021-03-181-3/+3
* gnu: goffice: Update to 0.10.49.•••* gnu/packages/gnome.scm (goffice): Update to 0.10.49. Tobias Geerinckx-Rice2021-03-181-2/+2
* gnu: di: Update to 4.49.•••* gnu/packages/admin.scm (di): Update to 4.49. [source]: Update URL. Tobias Geerinckx-Rice2021-03-181-3/+3
* gnu: isc-dhcp: Update bundled bind to 9.11.29.•••* gnu/packages/admin.scm (isc-dhcp)[inputs]: Update bundled bind to 9.11.29. Tobias Geerinckx-Rice2021-03-181-2/+2
* gnu: bind: Update to 9.16.13.•••* gnu/packages/dns.scm (isc-bind): Update to 9.16.13. Tobias Geerinckx-Rice2021-03-181-2/+2
* news: Add ‘de’ translation.Florian Pelz2021-03-181-0/+29
* news: Add entry for '--keep-failed' vulnerability.•••* etc/news.scm: Add entry. Ludovic Courtès2021-03-181-0/+58
* gnu: guix: Update to ec7fb66 [security].•••This updates the 'guix' package so that it provides the fix for <https://bugs.gnu.org/47229>. * gnu/packages/package-management.scm (guix): Update to ec7fb66. Ludovic Courtès2021-03-181-3/+3
* daemon: Prevent privilege escalation with '--keep-failed' [security].•••Fixes <https://bugs.gnu.org/47229>. Reported by Nathan Nye of WhiteBeam Security. * nix/libstore/build.cc (DerivationGoal::startBuilder): When 'useChroot' is true, add "/top" to 'tmpDir'. (DerivationGoal::deleteTmpDir): Adjust accordingly. When 'settings.keepFailed' is true, chown in two steps: first the "/top" sub-directory, and then rename "/top" to its parent. Ludovic Courtès2021-03-181-2/+41
* services: Enable "protected hardlinks" and "protected symlinks" by default.•••References: https://sysctl-explorer.net/fs/protected_hardlinks/ https://sysctl-explorer.net/fs/protected_symlinks/ * gnu/services/sysctl.scm (%default-sysctl-settings): New public variable. (<sysctl-configuration>): Use %default-sysctl-settings as the default value. * gnu/services/base.scm (%base-services): Add sysctl-service-type. * doc/guix.texi (Miscellaneous Services): Document the new defaults. Signed-off-by: Ludovic Courtès <ludo@gnu.org> Leo Famulari2021-03-183-3/+32
* Revert "gnu: python2-urllib3: Update to 1.26.4 [fixes CVE-2021-28363]."•••In response to commit 1a265842e634656411bc7304c4648273f174f65e we should no longer need this. Also see <https://bugs.gnu.org/47186>. This reverts commit db87d6ddafd26c5ad657178cf7fdab524d05c522. Léo Le Bouter2021-03-181-1/+1
* gnu: imagemagick/fixed: Redirect old sonames to new sonames.•••* gnu/packages/imagemagick.scm (imagemagick/fixed)[arguments]: Add 'fix-compat-cheat-rename-so phase to redirect old soname paths (expected without grafting) to new sonames introduced by ImageMagick 6.9.12-0 and later. These sonames are probably not forward compatible but most probably backwards compatible so it should suffice until we remove the graft. Léo Le Bouter2021-03-181-1/+23
* gnu: linux-libre 4.4: Update to 4.4.262.•••* gnu/packages/linux.scm (linux-libre-4.4-version): Update to 4.4.262. (linux-libre-4.4-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* gnu: linux-libre 4.9: Update to 4.9.262.•••* gnu/packages/linux.scm (linux-libre-4.9-version): Update to 4.9.262. (linux-libre-4.9-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* gnu: linux-libre 4.14: Update to 4.14.226.•••* gnu/packages/linux.scm (linux-libre-4.14-version): Update to 4.14.226. (linux-libre-4.14-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* gnu: linux-libre 4.19: Update to 4.19.181.•••* gnu/packages/linux.scm (linux-libre-4.19-version): Update to 4.19.181. (linux-libre-4.19-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* gnu: linux-libre 5.4: Update to 5.4.106.•••* gnu/packages/linux.scm (linux-libre-5.4-version): Update to 5.4.106. (linux-libre-5.4-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* gnu: linux-libre 5.10: Update to 5.10.24.•••* gnu/packages/linux.scm (linux-libre-5.10-version): Update to 5.10.24. (linux-libre-5.10-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* gnu: linux-libre: Update to 5.11.7.•••* gnu/packages/linux.scm (linux-libre-5.11-version): Update to 5.11.7. (linux-libre-5.11-pristine-source): Update hash. Leo Famulari2021-03-181-2/+2
* weather: Only show request statistics when requests were made.•••This avoids the script crashing if all data is fetched from the cache. * guix/scripts/weather.scm (report-server-coverage): Only show request statistics when some requests have been made. Christopher Baines2021-03-171-4/+5
* gnu: Add libucl.•••* gnu/packages/wm.scm (libucl): New variable. Signed-off-by: Ludovic Courtès <ludo@gnu.org> qblade2021-03-171-0/+29
* gnu: Use autoconf instead of autoconf-wrapper when possible.•••This should reduce confusion on when to use the "autoconf" package and when to use "autoconf-wrapper" instead in package definitions. Fixes <https://bugs.gnu.org/46564>. * gnu/packages/autotools.scm (autoconf-wrapper): advise to use the "autoconf" package instead where possible. * gnu/packages/game-development.scm (tsukundere)[native-inputs]: use "autoconf" instead of "autoconf-wrapper". * gnu/packages/gimp.scm (glimpse)[native-inputs]: likewise. (gimp-resynthesizer)[native-inputs]: add comment on why "autoconf-wrapper" is used. * gnu/packages/gnunet.scm (gnunet)[native-inputs]: use "autoconf" instead of "autoconf-wrapper". * gnu/packages/gnupg.scm (signing-party)[native-inputs]: add comment on why "autoconf-wrapper" is used. * gnu/packages/guile-xyz.scm (guile-bash,guile-filesystem,guile-ics,guile-udev)[native-inputs]: use "autoconf" instead of "autoconf-wrapper". * gnu/packages/libevent.scm (libuv)[native-inputs]: indicates "autoconf-wrapper" needs to be replaced with "autoconf" on core-updates. * gnu/packages/logging.scm (glog)[native-inputs]: use "autoconf" instead of "autoconf-wrapper". * gnu/packages/mail.scm (libetpan)[native-inputs]: likewise. * gnu/packages/mate.scm (mate-icon-theme-faenza)[native-inputs]: add comment on why "autoconf-wrapper" is used. (mate-screensaver)[native-inputs]: use "autoconf" instead of "autoconf-wrapper". * gnu/packages/package-management.scm (guix)[native-inputs]: likewise. * gnu/packages/sawfish.scm (librep)[native-inputs]: likewise. * gnu/packages/video.scm (motion)[native-inputs]: likewise. * gnu/packages/zile.scm (zile)[native-inputs]: likewise. Signed-off-by: Ludovic Courtès <ludo@gnu.org> Maxime Devos2021-03-1714-14/+23
* doc: Tweak "Invoking guix refresh" node.•••* doc/guix.texi (Invoking guix refresh): Update output in '--recursive' example. Use @xref, not @ref, at the beginning of a sentence. Ludovic Courtès2021-03-171-4/+4
* import: gnome: Silence URL redirect messages.•••* guix/import/gnome.scm (latest-gnome-release): Pass #:log-port to 'http-fetch/cached'. Ludovic Courtès2021-03-171-1/+4
* http-client: 'http-fetch' and 'http-fetch/cached' accept #:log-port.•••* guix/http-client.scm (http-fetch, http-fetch/cached): Add #:log-port and honor it. Ludovic Courtès2021-03-171-2/+9
* import: gnome: Exclude version numbers that do not start with a digit.•••Fixes a bug whereby NetworkManager would be updated to version "rc2". * guix/import/gnome.scm (latest-gnome-release)[even-minor-version?]: Change catch-all case to return #f when the first part is not a digit. Ludovic Courtès2021-03-171-3/+4
* scripts: weather: Provide more representative request statistics.•••Previously, the "seconds per request" and "requests per second" statistics really reported (cache lookups + requests) per second. By looking at the actual number of requests made within lookup-narinfos, a more representative value can be reported. * guix/scripts/weather.scm (let/time): Allow for multiple return values. (report-server-coverage): Alter the reporting of request statistics. Christopher Baines2021-03-171-9/+10
* substitutes: lookup-narinfos: Return the number of requests made.•••As an additional value, in addition to the narinfos. This value is useful in the weather script for reporting how many requests to the substitute server were made. * guix/substitutes.scm (lookup-narinfos): Additionally return the number of requests made. Christopher Baines2021-03-171-7/+8
* scripts: substitute: Tweak error reporting in process-substitution.•••The call-with-connection-error-handling was added in 20c08a8a45d0f137ead7c05e720456b2aea44402, but that error handling was previously inside of open-connection-for-uri/maybe, which is related to (call-)with-cached-connection which was used in process-substitution, but only actually used with call-with-cached-connection when used in fetch-narinfos. There's some handling for similar errors within with-networking, which is used within process-substitution. * guix/scripts/substitute.scm (process-substitution): Remove call-with-connection-error-handling call. Christopher Baines2021-03-171-8/+5
* scripts: substitute: Add back some error handling.•••In f50f5751fff4cfc6d5abba9681054569694b7a5c, the way fetch was called within process-substitution was changed. As call-with-cached-connection actually includes important error handling for the opening of a HTTP request, this change removed some error handling. This commit adds that back. Fixes <https://bugs.gnu.org/47157>. * guix/scripts/substitute.scm (call-with-cached-connection): New procedure. (with-cached-connection): New syntax rule. (process-substitution): Retry once for some errors when making HTTP requests to fetch substitutes. Christopher Baines2021-03-171-5/+34
* gnu: scdoc: Cross-compile.•••* gnu/packages/man.scm (scdoc)[arguments]: Use CC-FOR-TARGET. Tobias Geerinckx-Rice2021-03-171-1/+3
* gnu: scdoc: Don't use unstable tarball.•••The autogenerated tarball was modified upstream. * gnu/packages/man.scm (scdoc)[source]: Use GIT-FETCH and GIT-FILE-NAME. Tobias Geerinckx-Rice2021-03-171-6/+6
* gnu: libtirpc/hurd: Fix package source.•••Amend the changes in 1a265842e634656411bc7304c4648273f174f65e to properly access the origin patches from libtirpc. I noticed this as guix weather didn't work for this package. * gnu/packages/onc-rpc.scm (libtirpc/hurd)[source]: Call origin-patches on (package-source libtirpc) rather than the libtirpc package. Christopher Baines2021-03-171-1/+1